Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/efdc3ac8-cafe-3dec-8426-7c8a1eecbda5.roa
File:                     efdc3ac8-cafe-3dec-8426-7c8a1eecbda5.roa (raw, json)
Hash identifier:          bxB50REUXZE0bV3VxzNzPtUnT7O9h28UH3IGGZLSdfs=
Subject key identifier:   81:71:7B:6E:B7:87:AE:DF:BF:6E:1D:36:E8:AD:BC:D8:A1:85:D3:B4
Certificate issuer:       /CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
Certificate serial:       010D0C9F4328584A62909CAA31A6EAE712D669E0
Authority key identifier: CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/efdc3ac8-cafe-3dec-8426-7c8a1eecbda5.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     396908
IP address blocks:        2602:f956:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:9c:aa:31:a6:ea:e7:12:d6:69:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c27ca-fb7c-4cad-9f9b-4f754f864263
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=613940ce-87fe-4908-a1cd-347c1209bcae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b7:d0:ab:1d:4c:38:29:68:3e:fa:5f:ed:20:
                    25:09:34:7b:0c:b1:77:3e:cf:b5:bc:73:9b:62:c2:
                    d1:42:de:eb:8d:02:5a:fc:38:9b:e2:e5:67:bb:ae:
                    7f:9d:0f:52:81:0e:a7:ac:fa:a6:f7:49:6e:b0:8a:
                    a5:fa:00:d7:42:2c:e1:2f:57:01:74:2d:16:4e:31:
                    8e:de:4b:cf:d3:4b:d9:f2:dc:df:13:f9:36:c7:de:
                    78:9c:3f:30:e9:1b:32:dc:d7:f1:d0:2e:41:7e:3b:
                    5e:36:f6:c7:8e:83:da:b5:5b:38:2f:11:8c:0b:b0:
                    df:6b:8b:99:40:e4:ce:43:b6:be:94:c5:b1:4f:db:
                    fc:af:b0:c7:c1:ca:c6:63:46:93:b2:04:fa:38:9b:
                    0a:d8:fe:f3:c2:62:dc:d6:8b:31:f7:ff:f1:28:fe:
                    80:43:2b:5c:53:18:6e:cb:dd:71:93:06:fd:c7:6a:
                    98:80:35:b6:3a:9d:7a:1a:90:40:2c:a4:c2:23:e4:
                    b6:cd:eb:15:bb:2c:1f:af:e7:73:3a:b0:e7:c6:37:
                    ee:69:69:e6:49:3e:3a:39:a3:cc:7c:00:e9:ad:82:
                    9e:89:9f:49:0d:e1:88:f7:ae:a5:2a:b7:77:f1:08:
                    c5:0d:44:f9:77:9c:ed:3a:69:4b:35:74:12:24:9e:
                    49:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:71:7B:6E:B7:87:AE:DF:BF:6E:1D:36:E8:AD:BC:D8:A1:85:D3:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/efdc3ac8-cafe-3dec-8426-7c8a1eecbda5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.crl

            X509v3 Authority Key Identifier:
                keyid:CF:B9:5A:A2:3C:1B:20:FF:10:CA:74:8F:25:5C:F5:09:89:A2:BE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb2c27ca-fb7c-4cad-9f9b-4f754f864263.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f956:80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:87:37:86:e1:b1:fe:6e:0f:49:c8:b1:62:e3:3a:b1:1d:00:
         32:02:6e:06:47:cc:a5:1d:85:50:5d:b6:4c:a5:e6:51:5d:14:
         15:fa:e1:d3:3f:5c:d2:6b:5e:30:65:a5:ed:5a:4c:a4:9d:b0:
         9e:60:3b:7f:a9:2f:c3:a2:6f:58:ac:25:1e:e9:f8:de:61:b7:
         10:03:fa:6e:05:2d:3f:c8:c6:a1:1e:cf:86:24:ad:a1:1b:af:
         da:da:3a:1e:c7:f0:15:95:4c:be:1f:83:f6:6c:e6:7e:b7:5f:
         b1:14:e1:2a:23:d4:de:ee:be:c8:0e:cc:88:46:2d:47:49:81:
         44:78:da:1f:23:c7:8f:8b:ec:fb:5e:2b:2f:37:0b:94:72:57:
         2c:93:4a:0a:a4:5d:37:b2:19:17:2a:84:4a:20:89:59:02:a5:
         65:0b:49:b9:cd:50:9c:a3:6a:13:82:80:f9:ac:80:43:05:f4:
         02:10:cb:48:b0:aa:5d:e6:74:28:db:c1:81:50:45:40:73:92:
         51:ad:76:93:c2:3e:af:f8:82:ff:b3:e0:e6:21:72:10:4f:33:
         f4:b6:7c:b9:35:61:33:5a:c6:3b:c9:7c:f3:ee:27:b0:2f:d7:
         66:d3:a6:d4:e0:eb:9d:0b:e0:43:94:c0:5a:8a:ba:71:ce:6e:
         35:fa:ea:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 22:53:59 2025 by rpki-client